@InfobloxThreatIntel@infosec.exchange
2026-03-25 16:42 UTC
Through our research sharing partners our team has received copies of the Poisonseed phishing emails. We were surprised by the diversity of the content and the novel efforts to use breaking news topics to try and trick someone into quickly logging into one of their phishing portals.
Some of their phishing messages are a bit more classic, with lures like "Your bounce rate needs attention"
Or "A subuser with sending permissions was recently created on your account."
Replies (1)
-
@InfobloxThreatIntel@infosec.exchange 2026-03-25 16:43
In December 2025 Poisonseed started to test phishing content which alleged that a "new theme" was going to be added to all ongoing emails by default, typically using a politicized topic to make someone worry about injecting politics into their mass communications, which could lead to someone rushing through the login process and getting phished. The first phishing email with this "template lure" was about a LGBTQ+ pride theme: